The thing is, masyado nang deprecated ang SMF to add those functionalities you mentioned. I was also wondering why haven't they implemented something concerning changing email address na magsesend muna ng confirmation sa email mo before ma-change. That would somehow be easy, but then again, SMF limitation (yata). And for the last 2 years, we are discussing about the $1,000,000 bitcoin forum software (na lumobo na ang value given na yung donations e in bitcoins) na somehow hindi pa din na roroll out. First sabi ni theymos it would be around 2016 kasi ngayon Q3 2017 na wala pa rin. Anyway, it takes time siguro talaga since onti lang naman may full control sa forum, si Cyrus and theymos lang.

In regards to signed messages, HD wallets do have those functionalities embedded. Just search for Tools > Sign/Verify in Multibit or Electrum then you can create a signed message using a bitcoin address you control.

Still, change your pasaword into something atronger, symbols, uppercase lowercase, numbers etc para mas secure. Any passwords with 6 or more characters with the said criteria would take thousands of years to crack. Yung sakin kasi basic password with letters and numbers lang, at never ako nagpalit since 2014.

Sa katunayan gumawa na ako ng topic sa meta regarding my case, and yes, I do have two staked addresses in this forum, both of which I have signed a message. You can find the thread here. Also, nagreply na si theymos, sabi niya verification fails. Malamang sa malamang may nacopy akong mali kaya ganun kasi may isang user na nakapagverify nung messages eh. Pa-verify na rin at pa-bump ng thread para mapansin ng admins.

Minessage ko na rin si boss Dabs to further bump my case sa admins since isa siya sa mga trusted Staff dito since pumasok ako sa forum. Sana mabawi ko pa account ko.

Bump. Hope one of the admins verify my claims and help me out.

Good afternoon guys. Recently na-hack yung account ko dito sa forum. Legendary account, https://bitcointalk.org/index.php?action=profile;u=306338 at gumawa ako ng appeal para ma-recover yung account ko. Unfortunately, sabi ni theymos verification fails daw, nagtataka ako since sa ibang tao gumana pero sa admin hindi. Nagsend pa ko ng nagsend ng message for further proofs pero hindi pinansin ng dalawang current admin yung appeals ko na nakakasama lang ng loob since wala silang pake sayo once na tinry na nila. I've been here since 2014, at lahat ng proofs kaya ko ipakita sa dalawang current admin kaso hindi nila ako pinapansin. Advice ko lang sa mga nandito na since 2015 at di nagpalit ng pass, magpalit na kayo for security purposes na din. Naiinis lang ako since ang gusto ko lang naman e yug account dahil ang tagal na sakin nun. Saglit lang naman basahin, iverify yung message at ireset kaso hindi magawa. Kung may staff dito sa forum na to na pinoy baka naman pwede niyong i-bump kay Cyrus or theymos yung problema ko o?

You were lucky that your password haven't changed after the person gained access to your account. You must ensure that your new password would be strong enough for the scenario to not happen again. Also, try to check whether the email address attached is still yours. It could cause a lot of problems too

And here I am wondering, why does this forum don't send any email confirmation whenever the email or other aspects of the account is changed. In that way, the true owner of the account would at least have the final card if the hacker decides to replace the email.

To both of them actually.

My account was stolen too, and have sent verifications with two staked addresses, sent two signed messages using those addresses but up to now admins have yet to reply. I also have copies of messages being sent to me in my email since that is also a part of verification and can help too.

Hope we can recover our accounts.

This is a great idea for lazy people in the forums. A prompt could appear like when you try to watch or unwatch a topic here. Something like: "Warning: you are leaving bitcointalk etc etc." would be nice.

---

Anyways, my account is still hacked. Waiting for theymos or Cyrus to reply on my messages in regards to that. I just hope the hacker wouldn't go out asking for loans or anything that might ruin the reputation of the said account.

Haven't changed mine since the last hack (2015) but it took two years for mine to get hacked, and the password I use is just an anagram of what my real name is (so yeah I fucked up on that part). Even my first alt account that I first used to send PMs to theymos and Cyrus is also hacked (?) since I can't open it today.

Should 2FA be enabled or nah? Or does SMF support 2FA services?

I know that, but that is to help me get this post some relevance and attention so that hopefully they lend some time to look at it knowing that both admins are busy persons. Anyway, thanks for the reply. Won't be sending them any PMs until they reply. Haven't messaged them in that format but I think I would need to sign a new message if it needs be.

On the first message I sent to theymos, I now know why the verification failed: he might have included the date on the said signed message therefore voiding the signature. In this post I haven't included the date, only the raw output of the message from Electrum. I hope he reads this one still. And I have sent Cyrus a PM as well but I think he's quite engaged as of now. If this ia not enough to verify my claims then idk what needs to be done next.

Anyone else care to verify the messages I made? Please help me get my account back. Also wondering if 2FA can be enabled in SMF-powered forums.

My account was hacked laat July 13, forum time and after that, the email address was changed, so is the password. I tried contacting theymos and Cyrus and sent proofs that I indeed owned the account https://bitcointalk.org/index.php?action=profile;u=306338 theymos replied, however he said that verification "fails". Idk what that means but I've tried every single signed message verifier and it verifies.

Here is the signed message from two addresses that I used about two years ago in the "Stake your Bitcoin Address herr" thread.

(This signed message is from electrum, so I'll just post what is the raw output in electrum.)

Message:

Hi theymos, this is dothebeats from bitcointalk. My account was hacked and I wanted to send you some proof that it is really me who owns the said account.

Address:

1A26NMs1Ta5pSCDJ2vVybciMtyeZM1UEvK

Signature:

HxVnOy7Ka+fED1ymow6reJJFsYEI2QA396xf3pyyrhl9UddNEdkp61+LDXSBm2E2zSuICoyecVtJlGpKAdCNzaM=


^ That above is the first message. Verify it all you want. It will be verified. Also, doing a quick search in google will lead you to a topic in Meta, stake your bitcoin address here

This is the thread that I posted that address and staked it too.


This is the other message that I sent to both Cyrus and theymos.

Message:

Additional verification that it is indeed I.

Address:

1HNFHfyZ2a1jYju6wJ6mpeae7mVo5qwVeJ

Signature:

HzxwBZwEexEbpbfNHVwj/VOrcOL806F9ufveFv4k8xMYbllWlNc0t8TQNatY83PzuC0UFIHf3LUz2wl+IfewXdo=

^ second sign message. Raw output from electrum. Verify all you want, it will turn out correct. The address I used is from April 2015 in the Stake your Bitcoin address thread, which can be found below:


Sorry for the long post. I really wanted to get my account back. Already have missed trades without that account and luckily, the hacker hadn't been online yet to compromise sensitive business I have in this forum.

If those weren't enough verification then I don't know what else will. As stated by the thread for recovering accounts, posted bitcoin address anywhere in this forum plus a signed message would be sufficient to recover the account. I hope theymos and Cyrus read this since I made this post while running late to work.

EDIT: Please ignore the formatting or the extra spaces in the signed message when verifying it. I did that for you guys to read what I sent.

EDIT 2: Last messaged I received in that account that was forwarded to my email: